Commit 55754cb1 authored by Hugo Lefeuvre's avatar Hugo Lefeuvre Committed by Hugo Lefeuvre
Browse files

faad2: add upstream commit links 

My last pull request was merged, including fixes for CVE-2019-6956,
CVE-2018-20360 and CVE-2018-20199. See upstream bug report and PR for
more information.

Update dla-needed entry.
parent fd83cf9f

data/CVE/list

+3 −0
Original line number Diff line number Diff line
@@ -25098,6 +25098,7 @@ CVE-2019-6956 (An issue was discovered in Freeware Advanced Audio Decoder 2 (FAA 
	[stretch] - faad2 <no-dsa> (Minor issue)

	NOTE: https://sourceforge.net/p/faac/bugs/240/

	NOTE: https://github.com/knik0/faad2/issues/39

	NOTE: https://github.com/knik0/faad2/commit/6823e6610c9af1b0080cb22b9da03efb208d7d57

CVE-2019-6955

	RESERVED

CVE-2019-6954
@@ -34414,6 +34415,7 @@ CVE-2018-20360 (An invalid memory address dereference was discovered in the sbr_ 
	[buster] - faad2 <no-dsa> (Minor issue)

	[stretch] - faad2 <no-dsa> (Minor issue)

	NOTE: https://github.com/knik0/faad2/issues/32

	NOTE: https://github.com/knik0/faad2/commit/3b80a57483a6bc822d3ce3cc640fa81737a87c54

CVE-2018-20359 (An invalid memory address dereference was discovered in the sbrDecodeS ...)

	- faad2 2.8.8-2 (low)

	[stretch] - faad2 <no-dsa> (Minor issue)
@@ -35018,6 +35020,7 @@ CVE-2018-20199 (A NULL pointer dereference was discovered in ifilter_bank of lib 
	[buster] - faad2 <no-dsa> (Minor issue)

	[stretch] - faad2 <no-dsa> (Minor issue)

	NOTE: https://github.com/knik0/faad2/issues/24

	NOTE: https://github.com/knik0/faad2/commit/3b80a57483a6bc822d3ce3cc640fa81737a87c54

CVE-2018-20198 (A NULL pointer dereference was discovered in ifilter_bank of libfaad/f ...)

	{DLA-1791-1}

	- faad2 2.8.8-2 (low)

data/dla-needed.txt

+2 −2
Original line number Diff line number Diff line
@@ -32,8 +32,8 @@ djvulibre (Thorsten Alteholz) 
dnsmasq (Mike Gabriel)

--

faad2 (Hugo Lefeuvre)

  NOTE: 20190823: Last PR pending review: https://github.com/knik0/faad2/pull/38

  NOTE: Upload with last batch of patches will happen soon.

  NOTE: 20190826: all patches have been merged upstream now, upload with last batch of patches

  NOTE: will happen in shortly

--

freeimage

  NOTE: Maintainer will take care of the update.